CVE-2026-49939 | Apache James up to 3.9.0 access control

November 6, 2026 Yanac

A vulnerability described as very critical has been identified in Apache James up to 3.9.0. Impacted is an unknown function. The manipulation results in improper access controls.

This vulnerability was named CVE-2026-49939. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More